Overview

overview

10

Static

static

72ccd0cdc3...ed.exe

windows7-x64

10

72ccd0cdc3...ed.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    72ccd0cdc33f2be6ed973173fbb3037bb87d69282a54596035c1ed4cd81805ed

  • Size

    232KB

  • Sample

    221011-ljb11sgdcq

  • MD5

    27a2cf0c00fda3856479dcd98c604f80

  • SHA1

    798ca709b5f494a886aa1a44483d62ac5ebde3b2

  • SHA256

    72ccd0cdc33f2be6ed973173fbb3037bb87d69282a54596035c1ed4cd81805ed

  • SHA512

    4be18207020ec98dc8c91783c818316088dc3203f5013f05b81e3d289fe0515d89845caa56445f53b7463fbb270266a5495e79cffd822ce844f02eae3a0ca6ac

  • SSDEEP

    1536:GjzUcGGomoDo0omoEo4A5AVzotokoXoOoioVo2oEogoFoPoeoWooo7oxozoZoMov:MUcGJA5AVap/Q

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      72ccd0cdc33f2be6ed973173fbb3037bb87d69282a54596035c1ed4cd81805ed

    • Size

      232KB

    • MD5

      27a2cf0c00fda3856479dcd98c604f80

    • SHA1

      798ca709b5f494a886aa1a44483d62ac5ebde3b2

    • SHA256

      72ccd0cdc33f2be6ed973173fbb3037bb87d69282a54596035c1ed4cd81805ed

    • SHA512

      4be18207020ec98dc8c91783c818316088dc3203f5013f05b81e3d289fe0515d89845caa56445f53b7463fbb270266a5495e79cffd822ce844f02eae3a0ca6ac

    • SSDEEP

      1536:GjzUcGGomoDo0omoEo4A5AVzotokoXoOoioVo2oEogoFoPoeoWooo7oxozoZoMov:MUcGJA5AVap/Q

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks